Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier: 5a+PxYGw/zRHLRoJl+vCGE8ZANix9rDKKUy92egx4w4=
Subject key identifier: 1D:52:5E:34:93:A5:0C:02:68:C4:C2:66:98:3D:FD:99:05:74:FA:33
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial: 01A0C4451FA03233869C649A2952E9819DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 14:00:59 +0000
Manifest this update: Mon 21 Sep 2026 14:00:59 +0000
Manifest next update: Tue 22 Sep 2026 14:00:59 +0000
Files and hashes: 1: b2w6O9WirtRCdzK66va1rPliDCM.roa (hash: stbRk0sxdQicjLZT3kCAibpOrHEkv6FoTLisoOLFpLg=)
2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: ml9HPZ8PK6Ap/xEwRLy6Qi7251lYN+GXwD5hCZWqhww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:45:1f:a0:32:33:86:9c:64:9a:29:52:e9:81:9d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Validity
Not Before: Sep 21 14:00:59 2026 GMT
Not After : Sep 22 14:00:59 2026 GMT
Subject: CN=1d525e3493a50c0268c4c266983dfd990574fa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:b7:dc:6a:bb:9d:b1:ea:da:53:10:4f:6b:
49:c3:07:0f:7f:fc:b9:d0:3c:05:44:ea:f1:6f:b5:
b2:03:17:00:97:1f:f7:dd:74:e2:1d:1f:b5:45:6b:
c2:f9:c8:13:a8:86:e0:62:85:6e:f6:9f:d4:18:17:
75:8a:8a:09:85:82:ea:f5:08:1c:93:1d:39:70:61:
c5:da:74:f4:f4:4c:f1:69:4d:9c:1e:9d:57:2c:34:
2e:23:98:ad:4c:9f:7b:9f:ba:d8:fa:67:6f:e0:36:
78:99:98:25:88:03:58:c3:63:d5:34:00:e0:c4:e4:
b5:f3:25:6a:5d:7d:b3:54:4c:3f:99:96:9c:7d:6f:
7c:dc:dc:24:40:b0:64:63:e7:ea:ee:6c:ce:46:e0:
c1:5b:1e:b6:2c:f1:01:89:8b:26:2f:6f:67:63:fa:
a1:e9:e8:c7:0f:4a:bd:69:6e:28:aa:2f:6f:1a:d9:
15:82:88:03:ae:35:9d:8a:2c:a6:27:28:15:b9:fa:
75:b4:b7:3c:93:50:31:07:5f:a9:60:c3:5f:ae:5e:
10:a1:8f:db:7b:4d:4f:51:c5:74:aa:dd:b8:f7:68:
41:e5:c1:9c:8a:58:13:66:df:5b:1f:b3:47:0c:6b:
57:f1:47:37:97:bb:1e:a3:71:3e:26:a4:95:90:48:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:52:5E:34:93:A5:0C:02:68:C4:C2:66:98:3D:FD:99:05:74:FA:33
X509v3 Authority Key Identifier:
keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c1:50:06:1e:00:fa:ad:29:3b:90:e4:9b:ef:e8:45:fb:2d:
20:df:27:d9:d0:0e:96:97:85:e8:cc:08:15:9f:ed:e0:1e:ab:
2d:2b:99:a3:a1:7d:d8:b8:19:ac:cc:21:53:6f:ed:1b:45:54:
ea:05:c4:3a:99:dd:14:ec:85:4b:49:fa:bc:e8:f6:5a:38:e3:
5e:09:04:9a:e6:2c:b8:21:bb:05:5b:ee:9e:14:62:f2:d3:53:
59:2c:e3:57:ba:38:e9:6f:bb:45:b8:9d:f7:0c:76:a1:a7:46:
80:43:46:98:c5:74:23:67:57:23:e7:46:8a:28:fc:d5:7f:9d:
bf:e0:8d:46:c6:b6:83:2e:12:d0:ea:18:70:29:e6:3b:2b:64:
a1:af:3e:21:49:1f:c0:57:9b:97:e1:38:f6:bf:3d:aa:a5:e9:
2a:92:c3:f1:45:a7:cc:55:e1:76:33:36:8a:24:03:07:dd:4d:
fa:11:41:d7:80:bb:c8:78:f8:e9:21:e0:a4:86:4e:b2:24:bd:
af:28:a0:00:17:bc:cb:f1:38:d7:d8:5e:1a:18:48:be:66:c3:
25:83:09:00:69:c5:c3:77:52:f2:cf:05:2c:87:8d:34:7f:46:
47:75:31:eb:51:56:bf:dd:1d:87:42:15:b2:e9:1b:83:e4:76:
e8:61:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:17:01 2026 by rpki-client